CVE-2024-2742: OS Command Injection in Planet IGS-4215-16T2S

Published Mar 21, 2024

Updated

Operating system command injection vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. An authenticated attacker could execute arbitrary code on the remote host by exploiting IP address functionality.

Affected Software

1 affected component

Planet IGS-4215-16T2S

Remediation

Information

Vulnerability fixed in firmware version 1.305b231218.

Event History

Mar 21, 2024

CVE Published

via MITRE·11:45 AM

Data Sourced

via MITRE·11:45 AM

RemedyDescriptionSeverityWeakness

Apr 11, 2024

Data Sourced

via NVD·01:25 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-2742?

CVE-2024-2742 is classified as a high severity vulnerability due to the potential for remote code execution.

How do I fix CVE-2024-2742?

To fix CVE-2024-2742, update the firmware of the Planet IGS-4215-16T2S device to the latest version provided by the vendor.

Who is affected by CVE-2024-2742?

CVE-2024-2742 affects users of the Planet IGS-4215-16T2S device running firmware version 1.305b210528.

What type of vulnerability is CVE-2024-2742?

CVE-2024-2742 is an operating system command injection vulnerability that allows authenticated attackers to execute arbitrary code.

What should I do if I cannot update my device for CVE-2024-2742?

If you cannot update your device for CVE-2024-2742, consider implementing strict access controls to limit unauthorized access.